Last updated: January 2025
Rafael Ogel & Justin Rüdiger GbR ("Papership Media", "we", "us", or "our") operates the Papership Media client portal (the "Service") and is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and German data protection laws.
This Privacy Policy explains how we collect, use, process, and protect your personal data when you use our Service, particularly in connection with Instagram integration features.
Controller Information:
2.1 Types of Data We Collect
Account Data:
Instagram Integration Data:
Usage Data:
2.2 Purpose of Data Processing
We use your personal data to:
Under GDPR, we process your personal data based on the following legal grounds:
Art. 6(1)(b) GDPR - Contract Performance:
We process your data as necessary to perform our contract with you, including providing Instagram integration services, account management, and customer support.
Art. 6(1)(a) GDPR - Consent:
You have given explicit consent to the processing of your personal data, including Instagram data, by accepting this Privacy Policy and our Terms of Service during account registration.
Art. 6(1)(f) GDPR - Legitimate Interest:
We have a legitimate interest in ensuring the security of our Service, preventing fraud, and improving our platform's functionality.
4.1 Meta Platforms (Instagram)
To provide Instagram integration features, we exchange data with Meta Platforms, Inc. (US) through their Instagram Basic Display API and Instagram Graph API. This includes:
Meta's processing of your data is subject to their Privacy Policy. Transfer of data to Meta (US) is safeguarded by Standard Contractual Clauses (SCCs).
4.2 Supabase
We use Supabase (Supabase Inc., US) for database hosting and authentication. Supabase processes your data as our data processor under a Data Processing Agreement (DPA). We recommend configuring Supabase to use EU data regions for GDPR compliance.
4.3 Vercel
Our Service is hosted on Vercel (Vercel Inc., US), which processes your IP address and usage data as our data processor under a DPA. We recommend configuring Vercel to use EU data regions.
4.4 Papership Media Administrators
Our platform administrators have access to all account and Instagram integration data as necessary to provide customer support, troubleshoot issues, and ensure the security and proper functioning of our Service. This access is limited to authorized personnel and is conducted in accordance with strict confidentiality obligations.
4.5 Legal Requirements
We may disclose your personal data if required by law, regulation, legal process, or governmental request.
Some of your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including:
Safeguards:
We ensure that all international data transfers are protected by appropriate safeguards in accordance with GDPR Article 46, including:
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
Account Data:
Instagram Data:
Log Data:
Server logs and access logs are retained for 90 days for security and troubleshooting purposes.
After the retention period, we will securely delete or anonymize your personal data unless we are legally required to retain it.
You have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR):
You can request a copy of the personal data we hold about you, including Instagram integration data.
Right to Rectification (Art. 16 GDPR):
You can request correction of inaccurate or incomplete personal data through your account settings.
Right to Erasure (Art. 17 GDPR):
You can request deletion of your personal data, including disconnecting and deleting Instagram integration data.
Right to Restrict Processing (Art. 18 GDPR):
You can request restriction of processing under certain circumstances.
Right to Data Portability (Art. 20 GDPR):
You can request transfer of your data in a structured, commonly used format.
Right to Object (Art. 21 GDPR):
You can object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to Withdraw Consent:
You can withdraw your consent at any time by disconnecting your Instagram integration in your account settings.
Right to Lodge a Complaint:
You have the right to lodge a complaint with the competent supervisory authority:
Our Service uses the following types of cookies and similar technologies:
Essential Cookies:
Analytics:
We may use analytics tools to understand how you use our Service and improve functionality. These tools do not collect personally identifiable information.
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Service.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
Despite our security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Our Service is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
The "Last updated" date at the top of this page indicates when the Privacy Policy was last revised.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Rafael Ogel & Justin Rüdiger GbR
Mülheimer Straße 6
68219 Mannheim, Germany
Email: info@papership-media.com
Phone: +49 160 7064 377
For privacy-related inquiries or to exercise your GDPR rights, please email us at info@papership-media.com with the subject line "GDPR Request". We will respond to your request within one month.